The options string can arrive as a NULL pointer. Ensure strstr() is only called if it has a valid pointer.